Parse immutable registry digest safely
All checks were successful
Build and publish policy-nexus image / build-and-push (push) Successful in 46s

This commit is contained in:
tegwick 2026-08-18 13:40:11 +02:00
parent e737b74688
commit 45c464e1bc

View file

@ -97,8 +97,8 @@ jobs:
"${BUILD_CONTEXT}" "${BUILD_CONTEXT}"
PUSH_OUTPUT="$(docker push "${IMAGE}:${SOURCE_TAG}")" PUSH_OUTPUT="$(docker push "${IMAGE}:${SOURCE_TAG}")"
printf '%s\n' "${PUSH_OUTPUT}" printf '%s\n' "${PUSH_OUTPUT}"
IMAGE_DIGEST="$(printf '%s\n' "${PUSH_OUTPUT}" | awk '/digest: sha256:/{print $2}' | tail -1)" IMAGE_DIGEST="$(printf '%s\n' "${PUSH_OUTPUT}" | tr '\r' '\n' | awk '{for (i=1; i<=NF; i++) if ($i ~ /^sha256:[a-f0-9]{64}$/) print $i}' | tail -1)"
test -n "${IMAGE_DIGEST}" printf '%s' "${IMAGE_DIGEST}" | grep -Eq '^sha256:[a-f0-9]{64}$'
docker push "${IMAGE}:${REVISION_TAG}" docker push "${IMAGE}:${REVISION_TAG}"
docker push "${IMAGE}:main" docker push "${IMAGE}:main"